Attempt to get a 10 on the OpenSSF check.

Author: aaugustin

SECURITY.md

@@ -1,5 +1,12 @@
-# Security policy
+# Security
+
+## Policy
 
 Only the latest version receives security updates.
 
-Please report vulnerabilities [via Tidelift](https://tidelift.com/security).
+## Contact information
+
+Please report security vulnerabilities to the
+[Tidelift security team](https://tidelift.com/security).
+
+Tidelift will coordinate the fix and disclosure.